4 ms·

Here's the same exploit disguised as a game, to make it less obvious that it's tricking the user into interacting with it: http://lcamtuf.coredump.cx/yahh/ http

Here's the same exploit disguised as a game, to make it less obvious that it's tricking the user into interacting with it: http://lcamtuf.coredump.cx/yahh/ http://lcamtuf.coredump.cx/yahh/ Documentation of the game proof-of-concept: http://lcamtuf.blogspot.com/2013/05/some-harmless-old-fashioned-fun-with-css.html http://lcamtuf.blogspot.com/2013/05/some-harmless-old-fashio...

maaarghk 12y ago
That's really good, and a very informative forum post!
Fuxy 12y ago
Cool. That is a neat trick/exploit never heard of it before. Thx. for the links.
dzhiurgis 12y ago
My first idea was clickjacking and social networks, but that probably is impossible.